Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Collecting information about your computer?

Lewis Nerd
Nerd by name and nature!
Join date: 9 Oct 2005
Posts: 3,431
06-27-2006 23:18
/3/21/116641/1.html

Am I alone in thinking this is so not the way to be heading with the problem of unregistered accounts? Talk about an invasion of rights......

Lewis
_____________________
Second Life Stratics - your new premier resource for all things Second Life. Free to join, sign up today!

Pocket Protector Projects - Rosieri 90,234,84 - building and landscaping services
Siobhan Taylor
Nemesis
Join date: 13 Aug 2003
Posts: 5,476
06-27-2006 23:25
From: Lewis Nerd
/3/21/116641/1.html

Am I alone in thinking this is so not the way to be heading with the problem of unregistered accounts? Talk about an invasion of rights......

Lewis
Hrm, it's certainly illegal... or at least the part about displaying payment information is here. There needs to be an opt out clause in this.
_____________________
http://siobhantaylor.wordpress.com/
Fade Languish
I just build stuff...
Join date: 20 Oct 2005
Posts: 1,760
06-27-2006 23:29
Dude, you were screaming your head off for a solution on griefers. This sounds like a simple hardware profile. It will mean they know it's you, even on a disposable alt. I run lots of commercial software that takes a similar profile, for licensing reasons.

Even when you get what you want you're not happy.
_____________________
Adam Zaius
Deus
Join date: 9 Jan 2004
Posts: 1,483
06-27-2006 23:34
It's a hash of your computer's serial numbers (eg processor serial number, MAC address), - same thing microsoft gets with Product activation.

From what Robin said, it's a one-way hash, that means they cant recover that information out of the information they are sent. (sort of a complex way of saying: "It's a number dividable by two, 500 can be subtracted from it", etc - without actually telling the number)

It actually sounds like a half decent idea for keeping people out - since IP addresses and MAC addresses are both easily avoided, this takes a bit more cunning to get around.
_____________________
Co-Founder / Lead Developer
GigasSecondServer
Io Zeno
Registered User
Join date: 1 Jun 2006
Posts: 940
06-27-2006 23:34
Well, it isn't illegal if they tell you first.

Probably IP address, but they need to spell it out.
_____________________
Siobhan Taylor
Nemesis
Join date: 13 Aug 2003
Posts: 5,476
06-27-2006 23:35
From: Io Zeno
Well, it isn't illegal if they tell you first.

Probably IP address, but they need to spell it out.
Recording it to check on alts is fine, publishing it isn't.
_____________________
http://siobhantaylor.wordpress.com/
Io Zeno
Registered User
Join date: 1 Jun 2006
Posts: 940
06-27-2006 23:35
From: Adam Zaius
It's a hash of your computer's serial numbers (eg processor serial number, MAC address), - same thing microsoft gets with Product activation.

From what Robin said, it's a one-way hash, that means they cant recover that information out of the information they are sent. (sort of a complex way of saying: "It's a number dividable by two, 500 can be subtracted from it", etc - without actually telling the number)

It actually sounds like a half decent idea for keeping people out - since IP addresses and MAC addresses are both easily avoided, this takes a bit more cunning to get around.


Well, that makes more sense than the IP. Do you know that this is what they are going to do?
_____________________
Ryan00 Odets
just a stupid redneck!
Join date: 17 Dec 2005
Posts: 289
06-27-2006 23:35
Ok invasion of rights? dont get me wrong that is your opinion and I repsect that. Do you not understand that everyweb site on the net can do this and you agree to hte terms buy visiting the site. The music industry uses a similar process to identify p2p song transfers, now sl is going to use it to help track and keep ppl accountable for there actions in game.


Correct me if Im wrong but dont you think knowing that SL & LL can get your computer ID will possibly stop some of the "annonimous" griefing?

I really dont want my computer ID floating around but hey if it helps keep the grief and scams out of sl the Im all for it. As for the legallity of the disclosed info I hope LL did the research on it and are within their rights. But there again we can only sit and wait to see what happens.





*edited for typos(god ya gotta love the overlooked words)
_____________________
~~~~~~~ryan00~~~~~~~~~~~~~


http://forums.secondcitizen.com/
Io Zeno
Registered User
Join date: 1 Jun 2006
Posts: 940
06-27-2006 23:37
From: Siobhan Taylor
Recording it to check on alts is fine, publishing it isn't.


The only thing they are going to publish is your "verified status", from what I understand. Any hardware info is only available to Lindens:

Hardware Identification
The Privacy Policy now points out that if you install Second Life software we'll be collecting information about your computer. The point here is to allow us to verify a unique identity and therefore better contain griefing by multiple accounts from one system. This information will not be available to non-Linden employees, and will only be available to Linden employees in an encrypted ("hashed";) format.
_____________________
Fade Languish
I just build stuff...
Join date: 20 Oct 2005
Posts: 1,760
06-27-2006 23:38
From: Io Zeno
Well, that makes more sense than the IP. Do you know that this is what they are going to do?


From Robin's blog:

"Hardware Identification
The Privacy Policy now points out that if you install Second Life software we'll be collecting information about your computer. The point here is to allow us to verify a unique identity and therefore better contain griefing by multiple accounts from one system. This information will not be available to non-Linden employees, and will only be available to Linden employees in an encrypted ("hashed";) format."

Which is seperate to this:

"Account Information in Profile
We currently include information about your account in your Second Life profile, including your account name, age, and type (e.g. Lifetime, Resident, Charter). Beginning with tomorrow's release (1.10.5(1)) we will also identify your account as being one of three types:
No Payment Info on File - account was created with no credit card or Paypal
Payment Info on File - account has provided a credit card or Paypal
Payment Info Used - credit card or Paypal on account has successfully been billed

This information is being provided so that other Residents will be able to see what degree of commitment you've made to the Second Life community, at least as it's expressed in your willingness to provide us with payment information. Please be assured that we will not be releasing any real life identifying information such as name, address, credit card or bank account details.

Future releases of Second Life will allow Residents to decide if they want to allow accounts which are essentially anonymous (no payment information given to us at registration except email address) to access their parcel."
_____________________
Siobhan Taylor
Nemesis
Join date: 13 Aug 2003
Posts: 5,476
06-27-2006 23:38
The bit that's a problem (IMHO) is the fact that your "level of commitment" will be displayed in your profile for anyone to see. I don't really care what LL record (within reason of course) provided they can keep it secure, and right now, I doubt their ability to do even that.
_____________________
http://siobhantaylor.wordpress.com/
Siobhan Taylor
Nemesis
Join date: 13 Aug 2003
Posts: 5,476
06-27-2006 23:40
From: Io Zeno
The only thing they are going to publish is your "verified status", from what I understand.
I read it as publishing your payment level too... probably including tier. We'll see though, no doubt.
_____________________
http://siobhantaylor.wordpress.com/
Io Zeno
Registered User
Join date: 1 Jun 2006
Posts: 940
06-27-2006 23:40
From: Fade Languish
From Robin's blog:

"Hardware Identification
The Privacy Policy now points out that if you install Second Life software we'll be collecting information about your computer. The point here is to allow us to verify a unique identity and therefore better contain griefing by multiple accounts from one system. This information will not be available to non-Linden employees, and will only be available to Linden employees in an encrypted ("hashed";) format."


yeah, I got that, but they weren't more specific than "information about your computer", as in "your comp's serial number" or "your MAC address".
_____________________
Fade Languish
I just build stuff...
Join date: 20 Oct 2005
Posts: 1,760
06-27-2006 23:42
From: Siobhan Taylor
I read it as publishing your payment level too... probably including tier. We'll see though, no doubt.


No it doesn't say anything about publishing that information. Just whether you have supplied payment info, and whether you've been billed successfully.
_____________________
Io Zeno
Registered User
Join date: 1 Jun 2006
Posts: 940
06-27-2006 23:42
From: Siobhan Taylor
I read it as publishing your payment level too... probably including tier. We'll see though, no doubt.


I don't see anything about tier, more like three states of verification based on payment:

Beginning with tomorrow's release (1.10.5(1)) we will also identify your account as being one of three types:

No Payment Info on File - account was created with no credit card or Paypal

Payment Info on File - account has provided a credit card or Paypal

Payment Info Used - credit card or Paypal on account has successfully been billed
_____________________
Green Fate
Social Conundrum
Join date: 5 Dec 2003
Posts: 79
06-27-2006 23:43
From: Siobhan Taylor
The bit that's a problem (IMHO) is the fact that your "level of commitment" will be displayed in your profile for anyone to see. I don't really care what LL record (within reason of course) provided they can keep it secure, and right now, I doubt their ability to do even that.


I agree with this completely.
_____________________
this is not a .sig
Jeffrey Gomez
Cubed™
Join date: 11 Jun 2004
Posts: 3,522
06-27-2006 23:45
The information being used needs to be made crystal clear.

And, frankly, I don't find this to be a very good solution. A more self-contained system, like a randomly hashed client ID when Second Life first installs, would be "right" in my book.


Solving the problem with anything approaching spyware is only going to annoy long-term residents that, quite frankly, never asked for this in the first place. :(
_____________________
---
Fade Languish
I just build stuff...
Join date: 20 Oct 2005
Posts: 1,760
06-27-2006 23:45
From: Io Zeno
yeah, I got that, but they weren't more specific than "information about your computer", as in "your comp's serial number" or "your MAC address".


Yes, they did say hardware though. My guess, a combination of components. The Native Instruments software I use, takes a system profile based on things like your hard drive. Probably similar. They may not say the exact combination for security reasons maybe.
_____________________
Lewis Nerd
Nerd by name and nature!
Join date: 9 Oct 2005
Posts: 3,431
06-27-2006 23:47
From: Fade Languish
Dude, you were screaming your head off for a solution on griefers.


Yes, and I don't think this is a good solution.

From: Fade Languish
Even when you get what you want you're not happy.


This was not what I asked for as a solution.

Lewis
_____________________
Second Life Stratics - your new premier resource for all things Second Life. Free to join, sign up today!

Pocket Protector Projects - Rosieri 90,234,84 - building and landscaping services
Io Zeno
Registered User
Join date: 1 Jun 2006
Posts: 940
06-27-2006 23:49
From: Fade Languish
Yes, they did say hardware though. My guess, a combination of components. The Native Instruments software I use, takes a system profile based on things like your hard drive. Probably similar. They may not say the exact combination for security reasons maybe.


There are going to be people who balk at this, though. (already have, in this thread). Is the next thing, "we aren't doing this anymore because our statistics found people stopped the registration process at 'we collect information about your computer'", heh? Is that less invasive than a #CC or something? I don't know.
_____________________
Fade Languish
I just build stuff...
Join date: 20 Oct 2005
Posts: 1,760
06-27-2006 23:51
From: Lewis Nerd
Yes, and I don't think this is a good solution.



This was not what I asked for as a solution.

Lewis


You have a problem with them identifying your machine? Why?

Do you want them to be able to identify griefers or not? How do you propose they do it? Surely any form of verification has to check something, somewhere?
_____________________
Nolan Nash
Frischer Frosch
Join date: 15 May 2003
Posts: 7,141
06-27-2006 23:52
From: Jeffrey Gomez
Solving the problem with anything approaching spyware is only going to annoy long-term residents that, quite frankly, never asked for this in the first place. :(

On a related note - I am wondering if this is retroactive. In other words, I am currently not paying a tier, but I have paid in literally 1000s of dollars in the past 3+ years. I wonder if we have to be billed after this change goes into effect to get the profile status of info billing info on record or successfully billed?

I personally do not care for the idea. I feel that there are would-be demagogues out there that are going to use this as an angle to try and stratify the resident base. In effect, that is what LL is doing, and thereby creating an arena for more flamefests.
_____________________
“Time's fun when you're having flies.” ~Kermit
Fade Languish
I just build stuff...
Join date: 20 Oct 2005
Posts: 1,760
06-27-2006 23:54
From: Io Zeno
There are going to be people who balk at this, though. (already have, in this thread). Is the next thing, "we aren't doing this anymore because our statistics found people stopped the registration process at 'we collect information about your computer'", heh? Is that less invasive than a #CC or something? I don't know.


I'm sure they will. But is it a bad thing? Your machine already identifies itself when it access a web page, doesn't it? And is knowing what a component of your computer is really personal information?
_____________________
Nolan Nash
Frischer Frosch
Join date: 15 May 2003
Posts: 7,141
06-27-2006 23:57
From: Fade Languish
You have a problem with them identifying your machine? Why?

Do you want them to be able to identify griefers or not? How do you propose they do it? Surely any form of verification has to check something, somewhere?

Speaking for myself, I don't mind them collecting info about my machine, as far as I can tell, they already do. My issue is the apparent creation of classes. I can just see the threads now...

"These people are favored because of their billing status, yap yap yap!"

I think it's entirely possible to collect and store the data, and to use it to curb alt griefers without going the extra mile of connecting it to profiles.

They're just asking for trouble, in my opinion.

"These people lock us out because we don't own land, the nomads are second class citizens!"
_____________________
“Time's fun when you're having flies.” ~Kermit
Ryan00 Odets
just a stupid redneck!
Join date: 17 Dec 2005
Posts: 289
06-27-2006 23:59
Its lik this before if you didnt have a CC or some means of verifying your age and such thenyou didnt play! Now its going to be if you dont want to let us verify your pc your not going to play!

IP adsresses arent likely going to be used, when I started reading the posts i had one IP now I have another one! My ISP changes mine every two days as does most high speed internet providers!

More than likely IMO they are going to get your computer ID just like all the companies that allow free trials of their programs, except LL is going to use it to limit the amount of accounts created from the one ID. Seems like a sure fire way to curb some of the scams and griefing.
Now your not going to be as annonimous as you once was!
_____________________
~~~~~~~ryan00~~~~~~~~~~~~~


http://forums.secondcitizen.com/
1 2 3 4 5 6 7 8